Information-Theoretic Lower Bounds

Latest papers 53

Oct 8, 2026cs.LG

Verification with Transfer: Exact Information Frontiers and Their Price in Calls

A verifier that accepts or rejects whole answers reveals little: under a flat prior over kk-bit answers, zero error needs 2k−12^k-1 verifications. The usual remedy is to solve related source tasks, either all first, as a curriculum does, or interleaved with verification. We price this remedy in information and in calls. With an exact verifier, the least causal information that any interleaving of source calls and nn verifications needs to succeed with probability ss is a list rate-distortion function, attained by one observation before any verification. It lower-bounds the expected number of binary source calls, which designed sources meet within 1+log⁡251+\log_25 calls for unique answers and within a logarithmic term in general, where no additive constant suffices. With an exact verifier and fixed sources, moving every call before the first verification preserves all hard caps on calls, although interleaving can save unboundedly many expected calls; under a noisy verifier, source-first protocols can lose unbounded factors in information and in error. For linear banks over F2\mathbb{F}_2, optimal accuracy has a closed form, and after a polynomial-time reduction the budget profile is computable in time 2O(h2)poly⁡(J,k+h)2^{O(h^2)}\operatorname{poly}(J,k+h) for JJ sources and nuisance dimension hh. In these banks, for zero error under a hard cap, the calls beyond the rounded-up information price are exactly those spent on nuisance. Every numbered result apart from two clauses about the planner is machine-checked in Lean 4, assuming two published results. Used as a ruler, the frontier shows a small transformer using all delivered bits at latent dimension 55 and none at 1111 within fixed training budgets; in a test with predictions recorded before training, low XOR degree of the target bits did not suffice for their use.
Oct 8, 2026cs.LG

Recovery Guarantees for Posterior Sampling of One-Bit Compressed Sensing

We study the sample complexity of noisy one-bit compressed sensing for signals drawn from a prior distribution. By characterizing the effective distributional complexity of the prior via its approximate covering number, we prove that posterior sampling achieves accurate recovery with high probability when the number of measurements scales with the logarithm of the approximate covering number, up to a one-bit separation gap factor. This upper bound is robust to learned prior mismatch. Specifically, we show that posterior sampling with an approximate prior remains reliable, provided that the learned prior distribution is sufficiently close to the true signal distribution in Wasserstein distance. In addition, we establish a sample complexity lower bound for any reliable method of noisy one-bit compressed sensing, showing that our upper bound is nearly matched in its main prior dependent term. To approximate the ideal posterior sampling process for real world scenarios, we instantiate posterior sampling through a plug-and-play algorithm with diffusion priors. Experiments on the FFHQ and ImageNet datasets demonstrate the effectiveness of our proposed approach.
Oct 8, 2026cs.LG

New Lower Bound and Upper Bounds on the Regret for Online Sparse Linear Regression

We study online sparse linear regression (OSLR) where any algorithm is restricted to accessing only bb out of dd attributes per instance for prediction and b0≥0b_0\geq 0 additional attributes after prediction, which was proved to be NP-hard. Previous work focused on designing computationally efficient algorithms under regularity assumptions, but did not characterize its information theoretic complexity. In this work, we give the first lower bound on the minimax regret of OSLR and design algorithms with better upper bounds without regularity assumptions. We characterize how minimax regret scales with problem-dependent parameters, capturing the information theoretic complexity of OSLR.
Oct 8, 2026stat.ML

A General Ω~(TγT)\widetildeΩ(\sqrt{T γ_T}) Lower Bound for Kernel Bandits

The kernel bandit problem consists of sequentially optimizing an unknown function with noisy feedback, where the function has bounded norm in a given Reproducing Kernel Hilbert Space (RKHS). A central quantity in the regret analysis of kernel bandits is the maximum information gain γTγ_T. In particular, the best existing upper bounds scale as TγT\sqrt{Tγ_T} up to log factors, and nearly-matching lower bounds have been derived for specific kernels such as squared exponential and Matérn. However, lower bounds for general kernels are lacking, thus making it unclear in what generality the upper bounds are near-optimal. In this paper, we establish a general Ω(TγT/log⁡T)Ω(\sqrt{Tγ_T/\log T}) minimax regret lower bound for non-constant continuous kernels on compact domains, establishing near-optimality (within log factors) in a very general sense. We show that the log factor appearing in this bound is unavoidable in general, but that it can be removed under certain conditions. Among other things, our findings imply that the minimax-optimal scaling is exactly Θ(TγT)Θ(\sqrt{Tγ_T}) (i.e., within constant factors) for the Matérn-νν kernel with ν∈(0,2)ν\in (0,2), γγ-exponential kernel with γ∈(0,2)γ\in (0,2), and certain piecewise-polynomial kernels.
Oct 6, 2026cs.LG

An Accuracy-Information Tradeoff for Loss-Difference Conditional Mutual Information

Loss-difference conditional mutual information (ld-CMI) uses the smallest of the standard observations in the supersample hierarchy of generalization bounds: it measures what a learner's loss differences reveal about which candidate of each pair it was trained on. Accuracy is known to force information into the model; data processing does not carry such lower bounds to losses. We show, by bounding three moments of the loss differences, that accuracy also forces ld-CMI. For linear predictors with a smooth convex loss of nonzero slope at zero, such as the logistic loss, plus a regularizer whose curvature and growth are both of power r≥2r\ge2, on product distributions over a scaled sign cube in dimension at least linear in nn, every proper learner with expected excess risk at most ε\varepsilon on these distributions at the optimal sample size n≍ε−2+2/rn\asymp\varepsilon^{-2+2/r} has worst-case ld-CMI of order nn bits, and Θ(n/(1+(τ/ε)2))Θ(n/(1+(τ/\varepsilon)^2)) bits under Gaussian noise of standard deviation ττ on the loss differences. The same holds without a regularizer, at n≍ε−2n\asymp\varepsilon^{-2}. Consequently, range-scaled ld-CMI bounds cannot vanish on these distributions, although every proper learner's generalization gap is O(n−1/2)O(n^{-1/2}). We also show that model-level information does not determine noisy loss-difference information, and that the growth, slope and dimension conditions are needed, the last up to a logarithm.
Sep 30, 2026cs.CV

Structural Limits of the Information-Theoretic Uncertainty Decomposition

Uncertainty estimation in machine learning typically decomposes uncertainty into aleatoric uncertainty (AU) and epistemic uncertainty (EU) using the standard information-theoretic framework. However, in practice, two critical issues arise: entanglement (AU and EU are highly correlated) and epistemic collapse (EU magnitude shrinks with increasing model capacity). We analyze this framework on a functional level and discover that significant portions of the assumed AU, EU range are infeasible in finite settings, and cannot be attained with any class probabilities. We characterize how this infeasible region scales with the number of classes and Monte Carlo samples NN (e.g., from ensembles with NN members), revealing it is bounded by AU≤log⁡(2)/N\text{AU} \leq \log(2)/N. Crucially, the infeasible region's boundary helps explain epistemic collapse: when model confidence is high, AU>EU\text{AU} > \text{EU} is guaranteed by this fundamental structural limitation. Our findings show that increasing ensemble size mitigates epistemic collapse by reducing the infeasible area. Lastly, we caution against interpreting AU and EU as independent quantities in low AU regimes, since we show they are coupled when AU≤log⁡(2)/N\text{AU} \leq \log(2)/N.
Sep 29, 2026stat.ML

Lower Bounds for Linear-Oracle Online Learning

Can a constant number of linear minimizations per round improve on the T3/4T^{3/4} regret rate of online Frank-Wolfe on general convex sets? Weibel et al. conjectured that fixed-coefficient methods cannot. We prove their conjecture and extend the lower bound to every deterministic learner in an oracle-only model. The learner receives an initial feasible point and a diameter bound, and must remain feasible on every domain consistent with its oracle replies. For TT rounds, at most bb calls between decisions, diameter bound DD, and gradient norm bound LL, we construct an instance in dimension d=2b(T−1)+1d=2b(T-1)+1 with regret at least 2−1/4LDb−1/4T3/42^{-1/4}LDb^{-1/4}T^{3/4}. The adversary fixes the domain, initial point, deterministic tie rule and linear losses before play. The vertices form a path on which every point available before a decision has zero current loss, while the final vertex has negative loss on every round. For constant bb, the result matches the known upper rate for dimension-independent guarantees. For one-call fixed schedules with a nonzero coefficient on the newest gradient, a second construction gives regret at least 3LDT3/4/43LDT^{3/4}/4 with unique minimizers at every issued query. Exact-arithmetic certificates for the tuned schedule of Weibel et al. closely match their finite-horizon numerical worst cases, with unique oracle replies.
Sep 29, 2026cs.LG

A Sharp Transition in Data Reconstruction under Differential Privacy

Data reconstruction attacks have empirically been successful in recovering training samples from learned models, raising privacy concerns and motivating defenses with guarantees that remain valid against future threats. While differential privacy (DP) provides formal protection, choosing the privacy budget remains a challenge: small budgets severely reduce utility, but it is hard to quantify how large the budget can be without allowing accurate reconstruction. In this work, we study informed attackers who aim to reconstruct a single dd-dimensional training sample from a ρρ-zero-concentrated DP model, knowing all other training data. Our main contribution is to establish a sharp transition at ρ≍dρ\asymp d for data reconstruction: on the one hand, we derive entropy-based lower bounds for any private mechanism and any attack, characterizing a set of target priors for which reconstruction is information-theoretically impossible for ρ≪dρ\ll d; on the other hand, we analyze a simple attack on private linear regression with output perturbation, showing that reconstruction is practically feasible for ρ≫dρ\gg d. Remarkably, the transition moves to ρ≍sρ\asymp s for data lying in an ss-dimensional subspace, demonstrating that the privacy budget guaranteeing adequate protection must be assessed in terms of the effective dimension of the data. We validate our findings via experiments on synthetic data and natural images (CIFAR-10, ImageNet).
Sep 28, 2026cs.LG

QAM: Quadratic-Accurate Checkpoint Merging via Sequential Consistency

Saved checkpoints record states along a training trajectory, but generally do not determine the updates at states that would be visited under a different schedule. We study how accurately these checkpoints can reconstruct the endpoint of a sequential reference with prescribed update strengths. Under a common local transition model, two checkpoint-index moment conditions characterize all convex merges that agree with this reference through second order. We then prove an information limit that for nondegenerate profiles, no algorithm using only a fixed-length gradient-descent (GD) history with step size hh can achieve o(h3)o(h^3) endpoint error uniformly over a fixed class of smooth, strongly convex losses. The lower bound follows from two losses with identical GD checkpoint histories but sequential reference endpoints separated by Ω(h3)Ω(h^3). \textbf{Quadratic-Accurate Merging} (QAM) achieves a matching uniform O(h3)O(h^3) endpoint error bound. Its explicit coefficients also define the unique profile-dependent merge that exactly matches the sequential GD reference across all fixed quadratic objectives. Across two public Adam checkpoint trajectories (SmolLM3-3B and OpenEuroLLM-Prelude-9B), three windows and three profiles per model, and 15 tasks, QAM shows mixed results for short windows and broader advantages over \textbf{Warmup-Stable and Merge} (WSM) for longer windows. Matched-moment GSM8K diagnostics further show that local consistency alone does not fully determine downstream scores. These results characterize the reconstruction limits of saved histories, provide a coefficient rule that attains the optimal rate, and assess its practical utility.
Sep 22, 2026quant-ph

When are bosonic Gaussian states classical to learn?

A fundamental question in physics is: When does classical behavior emerge from quantum systems? Bosonic Gaussian states provide a natural setting to explore this quantum-classical boundary, as they capture both the classical field behavior and the intrinsic quantum nature of light. Here, we address this problem from a learning-theoretic perspective by asking: When are bosonic Gaussian states classical to learn? That is, under what conditions (if any) can an n-mode bosonic Gaussian state be learned with as few samples, and with operations as simple, as are needed to learn a classical 2n-variate Gaussian distribution? We establish a smooth crossover in learnability governed by the state's thermal fluctuations: - Cold Gaussian states are non-classical to learn: When the covariance matrix satisfies Σ≤(12+O(1n))IΣ\le(\frac12+O(\frac1n))I, i.e. close to the vacuum covariance, tomography under single-copy (i.e., non-entangled) measurements fundamentally requires Ω(n3)Ω(n^3) copies, strictly exceeding the sample complexity Θ(n2)Θ(n^2) of learning classical Gaussian distributions. We show that this hardness persists even when few-copy entangled measurements are allowed. - Warm Gaussian states are classical to learn: When thermal fluctuations exceed the vacuum noise, parameterized by Σ≥(12+ν)IΣ\ge(\frac12+ν)I for any parameter ν>0ν>0, we prove that single-copy tomography requires N=Θ(n2min⁡(n,1+ν−1))N=Θ\left(n^2\min(n,1+ν^{-1})\right) copies. This bound is tight and is achieved by simple, non-adaptive, unentangled heterodyne measurements. Crucially, for ν=Ω(1)ν=Ω(1), the sample complexity drops to Θ(n2)Θ(n^2), matching the classical case. Our results tightly characterize a quantum-to-classical crossover in the learnability of bosonic Gaussian states, reveal a novel connection between fundamental physics and statistical learning theory, and have implications for real-world sensing experiments.
Sep 21, 2026cs.IT

On the Information-Theoretic Limits of Latent-Space Watermarking Through Pretrained Generators

We study latent-space watermarking through a pretrained generator using a prescribed latent-to-output stochastic mapping, called the renderer. A watermark encoder selects the latent input using a message and secret key. For every message and semantic context, the released output must have exactly the desired conditional output distribution. For finite alphabets, we derive rate--key inner and outer bounds and characterize the coding and coordination requirements for realizing watermark communication through the prescribed latent interface. When the target output distribution of the generator uniquely determines the corresponding latent input distribution through the renderer, a strengthened converse yields the capacity region; the same region governs explicit preservation of the pretrained latent distribution. We extend the analysis to general jointly Gaussian models and identify a sufficient statistic of the latent that captures both the watermark-bearing information available at the generated output and the latent coordination required to preserve its target distribution. For the vector Gaussian model, we further characterize the optimal allocation of the secret-key resource across the resulting modes. Finally, we turn to an emerging robustness threat that is particularly natural in generative watermarking: an adversary can regenerate the released sample to obtain a fresh realization of the same underlying content while attenuating or destroying the embedded watermark. We incorporate this robustness axis into our framework and characterize the one-pass compound capacity of the scalar Gaussian model when the semantic context is known to the encoder but hidden from the detector, while the regeneration attack may depend on that context. Extending the analysis to multiple rounds of repeated canonical regeneration, we characterize the resulting watermark-capacity decay.
Sep 14, 2026cs.LG

Learning CNF Formulas from Uniform Random Solutions: Near-Tight Sample Complexity for Valiant's Algorithm

We revisit Valiant's algorithm (Commun. ACM'84) for learning nn-variable CNF formulas with clause size kk and variable degree dd from i.i.d. uniform random solutions in the local lemma regime. For fixed t≥1t\geq1, under k≳(1+1/t)log⁡dk\gtrsim(1+1/t)\log d, Valiant's algorithm achieves total variation error ε\varepsilon with O~(n⌈t⌉/ε)\widetilde{O}(n^{\lceil t \rceil}/\varepsilon) sample complexity. For t>1t>1, we prove a matching lower bound for Valiant's algorithm. At t=1t=1 (covering 0<t<10<t<1), we show Valiant's algorithm has optimal sample complexity up to logarithmic factors by an information-theoretic lower bound Ω~(n/ε)\widetildeΩ(n/\varepsilon).
Sep 9, 2026cs.LG

A positive resolution of the gap-entropy conjecture

We prove the gap-entropy conjecture for fixed-confidence best-arm identification with independent unit-variance Gaussian arms, means in [0,1][0,1], and a unique optimal arm. For each suboptimal arm ii, let Δi=μ∗−μiΔ_i=μ_*-μ_i be its gap from the optimal mean, and write H=∑i≠∗Δi−2H=\sum_{i\ne *}Δ_i^{-2}. Let prp_r be the fraction of HH contributed by arms with 2−(r+1)<Δi≤2−r2^{-(r+1)}<Δ_i\le2^{-r}, and let Ent(I)=∑r:pr>0prlog⁡(1/pr)\mathrm{Ent}(I)=\sum_{r:p_r>0} p_r\log(1/p_r). Among all algorithms that identify the optimal arm with probability at least 1−δ1-δ on every Gaussian instance, the optimal expected number of samples on a given instance, averaged over all permutations of the arm labels, is within absolute constant factors of H(log⁡(1/δ)+Ent(I))H(\log(1/δ)+\mathrm{Ent}(I)). Moreover, there is an algorithm, independent of the instance, whose expected number of samples is bounded by a constant multiple of this quantity plus g−2log⁡log⁡(ee/g)g^{-2}\log\log(e^e/g), where g=min⁡i≠∗Δig=\min_{i\ne *}Δ_i is the gap to the closest competitor.
Sep 9, 2026quant-ph

Optimal Low-Rank Quantum State Tomography with Bounded-Sample Joint Measurements

We determine the optimal sample complexity of low-rank quantum state tomography when each measurement may act jointly on at most tt samples. For sufficiently small ε\varepsilon, estimating an unknown state on Cd\mathbb{C}^d of rank at most rr to trace norm error ε\varepsilon with constant success probability requires, and is achievable with, Θ(drε2max{1,rt})Θ\left(\frac{dr}{\varepsilon^2}\mathop{\mathrm{max}}\left\{1,\frac{r}{\sqrt{t}}\right\}\right) samples. The lower bound allows the protocol to choose each joint measurement adaptively using all previous classical outcomes; the matching upper bound is nonadaptive. Thus joint measurements on at most tt samples improve the complexity of algorithms making single-sample measurements by at most a factor t\sqrt{t}. Further, measuring order r2r^2 samples jointly is necessary and sufficient to attain the unrestricted collective rate. For the lower bound, we vary the support of a state with fixed uniform spectrum and bound the Fisher information trace of every joint measurement on tt samples. The adaptive Fisher chain rule and the van Trees inequality then give the trace norm lower bound. For the upper bound, we construct and analyze a nonadaptive tomography protocol based on a Gaussian joint measurement. An explicit second moment identity and a conditional Gaussian law outside the state's support give a rank-dependent error analysis, yielding the matching rate.
Sep 8, 2026math.OC

Oracle Complexity of Stochastic Fixed-Point Equations with Nonexpansive Maps

We study the oracle complexity of computing a point with small fixed-point residual ∥T(x)−x∥≤ε\|T(x)-x\| \leq ε, for a general norm ∥⋅∥\|\cdot\| and a self-map TT of a compact convex set. We study this problem in the setting where TT is nonexpansive with respect to the same norm ∥⋅∥\|\cdot\| and accessed via an unbiased stochastic oracle with bounded variance σ2σ^2. We provide an algorithm that solves such instances for any norm with a weak Rademacher type q>1q > 1, with high probability. The algorithm is based on a recursive anchoring technique. For type-22 spaces, such as ℓp\ell_p-spaces for p∈[2,∞]p \in [2, \infty], our algorithm attains stochastic oracle complexity O~(σ2ε−3+ε−1)\tilde O(σ^2 ε^{-3} + ε^{-1}). We further prove a near-matching lower bound (i.e., matching up to poly-log factors) for such ℓ∞\ell_{\infty}-norm instances in high dimensions. Our lower bound holds against any randomized algorithm that succeeds with constant probability. It further extends to settings with ``sparse'' noise, where variance measured with respect to any ℓp\ell_p norm is of the same order, ruling out the possibility of improving oracle complexity as a function of ε\varepsilon by measuring variance in a non-matching ℓp\ell_p norm.
Sep 8, 2026cond-mat.stat-mech

Speed Limit for Information Acquisition in Stochastic Learning Dynamics

Neural networks acquire internal representations through learning. In this work, we formulate stochastic gradient descent (SGD) as a Markovian stochastic process and derive a Fisher-information flow speed limit that bounds the rate at which trainable parameters can acquire information about latent variables in the data-generating process. The resulting inequality decomposes the information flow into drift and noise contributions, thereby quantifying the roles of deterministic learning forces and SGD-induced fluctuations from an information-theoretic perspective. We verify the bound in analytically tractable basis-function linear regression, where the information budget predicted by the bound reproduces the ordering and characteristic time scales with which different latent variables are encoded in the learned parameters. These results establish Fisher-information speed limits as a quantitative framework for diagnosing when and how different aspects of the data-generating mechanism are acquired during stochastic learning.
Sep 7, 2026cs.IT

A Fundamental Limit in Decentralized Decision-Making

In decentralized decision-making, several agents connected according to a network graph aim at solving a classification problem by collecting streaming observations. Due to decentralization, they run an iterative algorithm where, at each iteration, they can only exchange information locally with their neighbors. While decentralized estimation solutions have been shown to match the performance of optimal centralized systems, we show here that surprisingly this conclusion does not hold for decentralized decision-making. Specifically, we prove that the error probability for the best decentralized decision strategy exhibits an irreducible loss with respect to the optimal centralized classifier. This result establishes a fundamental limit for the performance of any decentralized decision strategy. We obtain an analytical relation showing that this limit is related to the interplay between decentralization and classification. The first aspect appears through the distances between the nodes in the graph, while the second aspect plays through the moment generating functions of the likelihood ratios that describe the decision problem. By applying the derived closed-form relation to different network topologies and inference problems, we observe some interesting and perhaps unexpected behavior emerging. In particular, we characterize the scaling law (with the network size) for the loss over popular network topologies, showing that the error probabilities might differ by orders of magnitude; and we examine how performance is affected by the relative distance between informative and uninformative agents over the graph.
Aug 31, 2026cs.IT

Minimax bounds for watermarked and masked recursive discrete distribution estimation

Watermarking has been proposed as a way to identify synthetic samples in estimation settings where no metadata is available to distinguish them from real samples, but its precise effects remain unexplored. In the absence of a distinguishing mechanism, it has been shown that adding synthetic samples significantly reduces the marginal efficacy of new real samples. In this work, we study the minimax loss of such recursive discrete distribution estimation in the presence of watermarks in contrast to the unassisted and oracle-assisted losses. When the fraction of real samples vanishes asymptotically, we provide a lower bound that shows that it is impossible to improve performance by adding watermarks unless the false negative rate of detection also vanishes. Additionally, we show that in most regimes, the worst-case losses of a sequence of simple deterministic estimators match the corresponding lower bounds up to constants. Finally, we propose masking, a randomization procedure that narrows the gap in the remaining regimes to a Jensen gap. We conjecture that a tighter lower bound argument can close this gap.
Aug 31, 2026cs.IT

Strengthening Recursive Constructions for Zero-Error Shannon Capacity

The exact Shannon capacity is unknown for every odd cycle beyond the five-cycle C5C_5, making odd cycles a central open problem in zero-error information theory. Improving the known lower bounds requires constructing large independent sets in strong powers of these graphs. Recent AI-assisted work has produced a rapid sequence of improvements: building on the construction of Itty et al., Gao developed a recursive product construction for combining structured independent sets, and Buys, Polak, and Zuiddam (BPZ) subsequently strengthened this through a richer recursion framework. We continue this line of AI-assisted exploration and introduce a heterogeneous refinement of these constructions. The central observation is that the usefulness of an intermediate construction depends not only on the size of its current main independent set, but also on the auxiliary structure it carries into subsequent recursion. Consequently, different parts of that auxiliary structure need not use the same independent set, and different occurrences in a recursion need not use the same intermediate representation. We formalize this for Gao's binary product and derive explicit propagation rules showing how heterogeneous choices strengthen the resulting gadget while leaving its current code size unchanged, then extend the principle to the more general BPZ framework, tailoring constructions to the distinct roles they play within the recursion. Applying these refinements to the seven-cycle C7C_7, we obtain an independent set in C7⊠500C_7^{\boxtimes 500} yielding Θ(C7)≥3.25883262…Θ(C_7)\ge 3.25883262\ldots, improving the best known lower bound. Beyond the numerical gain, the results illustrate a general principle for recursive zero-error constructions: intermediate structures with the same dimension and current code size can have different downstream value depending on where and how they are used in the recursion.
Aug 27, 2026cs.IT

Sharp Minimax Regret for Infinite-Memory Logistic Prediction

We determine the minimax cumulative log-loss regret of a finite-alphabet, exogenously driven source with genuinely infinite input memory: independent Rademacher inputs (Ut)(U_t) are observed sequentially and the next binary mark has logit ∑j≥1θjUt+1−j\sum_{j\ge1}θ_jU_{t+1-j}, the unknown coefficients obeying a summable envelope ∣θj∣≤rj|θ_j|\le r_j, ∑jrj≤B\sum_jr_j\le B. At horizon TT, lag jj can move the logit by at most rjr_j and is exercised in only nT,j=(T−j+1)+n_{T,j}=(T-j+1)_+ rounds, and the two limitations combine into the sum ΓT(r)=∑j≤Tlog⁡(1+nT,jrj2)Γ_T(r)=\sum_{j\le T}\log(1+n_{T,j}r_j^{2}). One coordinate-localised Bayesian mixture achieves RT(r)≤CΓT(r)R_T(r)\le CΓ_T(r) for \emph{every} summable envelope with CC universal. Our main result is a matching nonasymptotic converse for the canonical exponential and polynomial envelopes; its new ingredients are a modular finite-sample information bound for logistic experiments with an exogenous random design, and a conditioning estimate for the overlapping Toeplitz lag matrix obtained by exhibiting each off-diagonal Gram sum as a sum of independent Rademacher variables indexed by the edges of a forest, needing neither local asymptotic normality nor any spectral theorem for random Toeplitz matrices. So ΓT(r)Γ_T(r) is the minimax regret scale here, giving Θ(α−1log⁡2T)Θ(α^{-1}\log^{2}T) for rj=Ae−αjr_j=Ae^{-αj} and Θ(T1/(2s))Θ(T^{1/(2s)}) for rj=Aj−sr_j=Aj^{-s}, s>1s>1 --- the latter without the extra (log⁡T)1−1/(2s)(\log T)^{1-1/(2s)} factor any window-truncation analysis pays. We also show memory decay cannot determine regret, and that a profile-scaled online Newton predictor attains OB(ΓT(r))O_B(Γ_T(r)) in polynomial time per round.
Aug 14, 2026cs.LG

Quantum Multi-Armed Bandits and Linear Bandits: Lower Bounds and Algorithms

We study quantum multi-armed bandits (QMAB) and quantum linear bandits (QLB), where the learner queries each arm or action through a quantum reward oracle or its inverse. Prior work gives algorithms over horizon TT with regret O(Klog⁡T)O(K\log T) for QMAB with KK arms and O(d2polylog⁡T)O(d^2\operatorname{polylog} T) for dd-dimensional QLB. This leaves open the optimal dependence on KK and TT and whether the dependence on dd can be further improved. In this work, we prove the first tight minimax regret bound of Θ(Klog⁡(1+T/K))Θ(K\log(1+T/K)) for QMAB and the first lower bound of Ω(dlog⁡(1+T/d))Ω(d\log(1+T/d)) for finite-action QLB, ruling out regret independent of TT. Our lower bounds rely on a high-confidence single-arm quantum testing lower bound for distinguishing a fixed reward mean from an interval of alternatives. A bandit-to-testing reduction then lifts it to the QMAB lower bound, while a linear embedding gives the finite-action QLB lower bound. The matching QMAB upper bound is obtained using a tail bound for the Quantum Monte Carlo (QMC) estimator. For finite-action QLB, we propose a phased elimination algorithm that combines a low-bias low-variance quantum mean estimator with a small-support GG-optimal design through a query allocation matched to the design weights. When the action set has size poly⁡(d)\operatorname{poly}(d), its regret is nearly linear in dd and matches our lower bound up to polylogarithmic factors.
Aug 13, 2026math.ST

On the Structural Limits of Machine Learning Decision Systems: An Information-Theoretic, Interaction-Based, and Stochastic-Dynamical Perspective

Machine learning procedures are commonly evaluated in terms of predictive accuracy and computational efficiency. However, their achievable performance is fundamentally constrained by structural properties of the underlying data-generating process, which are formalized in terms of informational bounds. In this work we examine intrinsic limits of data-driven decision systems from an information-theoretic and interaction-based perspective. We analyze minimal achievable error in classification through Fano-type bounds and precision limits in parametric estimation via the Cramér-Rao inequality, emphasizing that such limits depend on the underlying model rather than on algorithmic sophistication alone. We further discuss how implicit assumptions, such as independence, ergodicity, and distributional stability, affect the validity of inferential procedures. Building on interaction-based modeling principles, we review typical frameworks such as Markov Random Fields and potential based representations for encoding dependence mechanisms. We also describe decision systems, including LLM-integrated agent architectures, as feedback-driven stochastic processes where state-dependent dynamics may induce emergent macroscopic behavior. This perspective highlights the importance of having adequate models for the data as a prerequi- site for expanding predictive capability, and situates algorithmic learning within the informational limits imposed by the models.
Aug 2, 2026cs.CR

Why Formal Monitors Fail: Attack Distribution Entropy as a Coverage Bound for LTL-Based LLM Agent Safety

Runtime safety monitors based on Linear Temporal Logic (LTL) and finite automata (FSA) are increasingly deployed to intercept unsafe tool-call sequences in LLM agents. Yet the same monitor achieves 68-75% attack coverage on some model architectures and near-zero on others, with no explanation from capability scores, training data, or prompt design. We provide the missing theory. We prove that the recall of any fixed-invariant FSA monitor is bounded above by the concentration of the attack distribution: the fraction of attacks covered by the k most frequent trigger-completion patterns. When attacks concentrate (low Shannon entropy), a small fixed invariant set achieves high recall; when they disperse across many structurally distinct patterns (high entropy), no fixed invariant set of tractable size can, regardless of how the invariants were derived. We validate this entropy-coverage bound across eight frontier LLM architectures. GPT-class and DeepSeek backends yield highly concentrated attacks (H ~ 0.24 bits; one pattern covers 96%), explaining 68-75% recall; Gemini variants yield high-entropy distributions (H ~ 2.81 bits; 7 clusters each <= 7%), explaining near-zero recall (6-13%), invariant to architecture-matched retraining. Entropy accounts for 76% of variance in coverage (Pearson r = -0.87, p = 0.005, 95% CI [-0.98, -0.78]), holding under leave-one-out (r in [-0.91, -0.82]). We introduce a pre-deployment entropy test that predicts monitor coverage from a small attack sample, enabling architecture-aware monitor selection before deployment. The bound and test are architecture-agnostic and apply to any FSA-based runtime monitor over discrete action sequences.
Jul 21, 2026stat.ML

The Price of Hidden Curvature: An Ω~(d5/4T)\widetildeΩ (d^{5/4} \sqrt{T}) Lower Bound for Bandit Convex Optimization

We establish a Ω~(d5/4T)\widetildeΩ(d^{5/4}\sqrt T) lower bound on the minimax expected regret of stochastic bandit convex optimization of 11-Lipschitz functions on the Euclidean ball. This presents the first nontrivial regret lower bound that grows faster than dTd\sqrt{T} for this problem, establishing that stochastic bandit convex optimization is fundamentally harder than linear bandits. The hard class of convex functions we construct takes the following form in dimension 2d2d: for an action a=(a1,a2)∈B22da = (a^1,a^2) \in \mathbb{B}^{2d}_2, each function is the scaled soft maximum of a "tube", r−1∥W⋆a1−r8εa2∥2r^{-1} \| W^\star a^1 - \frac{r}{8\varepsilon} a^2 \|_2 (hyperparameterized by ε,r\varepsilon,r), and a squared distance function, 12∥a1−u⋆∥22−12∥u⋆∥22\frac12 \| a^1 - u^\star \|_2^2 - \frac12 \| u^\star \|_2^2. Here, W⋆∈Rd×dW^\star \in \mathbb{R}^{d \times d} is an unknown linear transformation, and u⋆∈Rdu^\star \in \mathbb{R}^{d} is an unknown vector which must be learned to minimize the function. Observations are informative about u⋆u^\star only when the learner's action lies near the tube determined by W⋆W^\star, satisfying a2≈8εrW⋆a1a^2 \approx \frac{8\varepsilon}{r} W^\star a^1: thus the learner must either find this tube without knowing W⋆W^\star, or spend observations learning useful directions of W⋆W^\star. Formally, our regret analysis exploits this tradeoff by bounding the posterior spread of Fisher information matrices obtained under an adaptive sequence of actions. Together, these ingredients give a sample complexity lower bound of Ω~(d5/2/ε2)\widetildeΩ(d^{5/2}/\varepsilon^2) to find an ε\varepsilon-optimal action, which translates to an Ω~(d5/4T)\widetildeΩ (d^{5/4} \sqrt{T}) regret lower bound. We also extend this lower bound to the unconstrained setting where the action space is Rd\mathbb{R}^d.
Jul 19, 2026cs.IT

Rate-Distortion-Perception Theory: Redefining the Fundamental Limits of Information Representation

Classical rate-distortion (RD) theory has long established the fundamental limits of lossy compression by quantifying the minimum number of bits required to represent a source under a prescribed distortion constraint. However, widely used distortion measures such as mean-squared error often fail to capture perceptual quality or semantic validity, which are increasingly central in modern learning-driven applications. Rate-distortion-perception (RDP) theory extends the RD framework by introducing perception as a third fundamental axis, quantified via distributional similarity between the source and reconstructed signals, leading to the rate-distortion-perception function (RDPF). This tutorial provides a structured overview of the coding principles underlying perception-aware lossy compression and surveys recent achievability results under different randomness assumptions. It then presents a unifying optimization viewpoint for computing the RDPF as defined by Blau and Michaeli, for both discrete and continuous sources under broad families of perceptual constraints, including f-divergences, alpha-divergences, and Wasserstein-based metrics. Special attention is given to computational tools such as alternating minimization schemes, Newton-based methods, and convex optimization formulations, as well as to analytically tractable cases such as Gaussian sources and the perfect-realism regime. Unlike recent broad surveys that emphasize generative architectures and AI-empowered communication systems, this tutorial focuses on the coding-theoretic and computational machinery needed to characterize, compute, and interpret the RDP limits. Finally, the tutorial outlines promising research directions at the intersection of information theory, neural compression, robust source coding, and perception-aware networked control systems.
Jul 18, 2026cs.IT

Tight Sample Bounds for Renyi and Min-Entropy Estimation

Estimating entropy from samples is fundamental in information theory and property testing. Shannon entropy measures average uncertainty and can be estimated to constant additive accuracy over a kk-symbol alphabet using Θ(k/log⁡k)Θ(k/\log k) samples. Min-entropy depends only on the most likely symbol. Both are special cases of order-αα R'{e}nyi entropy, HαH_α. We characterize the sample complexity of estimating min-entropy and R'{e}nyi entropy for kk and integer α>1α>1; our lower bounds also hold for noninteger α≥1.001α\ge1.001. We prove that min-entropy estimation to constant additive accuracy has sample complexity Θ(klog⁡k)Θ(k\log k). The upper bound uses the largest empirical frequency and concentration via dyadic grouping. The matching lower bound hides a slightly heavier symbol at a uniformly random location. Thus, min-entropy requires Θ(log⁡2k)Θ(\log^2 k) more samples than Shannon entropy and corrects a previously stated Θ(k/log⁡k)Θ(k/\log k) characterization. For every integer 2≤α≤c0log⁡k2\leα\le c_0\log k, we prove the matching fixed-accuracy bound Θc0(αk1−1/α)Θ_{c_0}(αk^{1-1/α}). Previous results gave Ωα(k1−1/α)Ω_α(k^{1-1/α}) for fixed integer α>1α>1 and Oc0(α2k1−1/α)O_{c_0}(α^2k^{1-1/α}) for all integer α>1α>1. Our upper bound analyzes an unbiased falling-factorial estimator based on αα-way collisions, while a hidden-heavy-coordinate construction gives the matching lower bound and shows that the factor αα is unavoidable. For every real 1.001≤α≤c0log⁡k1.001\leα\le c_0\log k, we prove the uniform lower bound Ωc0(αk1−1/α)Ω_{c_0}(αk^{1-1/α}). Finally, since 0≤Hα(p)−H∞(p)≤log⁡k/(α−1)0\le H_α(p)-H_\infty(p)\le\log k/(α-1), min-entropy uniformly approximates HαH_α when αα is a sufficiently large multiple of log⁡k\log k. Combining this reduction with our min-entropy bounds gives Θε(klog⁡k)Θ_\varepsilon(k\log k) sample complexity in the high-order regime.
Jul 18, 2026cs.LG

When Can Safe Controllers Adapt? Information before Commitment

Safe adaptive control is online adaptation under a safety guarantee on the learning trajectory itself. The controller may use any causal, history-dependent rule and act differently across environments as data arrive. Only its safety guarantee is uniform: the same rule must satisfy it under every initially plausible model. Performance is measured against a safe oracle that knows the realized model. Many finite-time analyses assume persistent excitation of the uniformly safe closed loop, so the data distinguish every pair of models requiring different control decisions. Under that assumption, feasibility is already settled; only the rate remains. We ask instead: Do the safety constraints permit such an informative experiment at all? While an alternative remains plausible, the controller must preserve a safe continuation under it. We call the first action that forecloses such a continuation commitment. Chance safety allows commitment only on an event rare under the alternative, and the evidence must arrive beforehand: the observation generated by the committing action is too late. We define precommitment information as the KL divergence between learner-visible laws stopped before commitment. Our main result is a causal reduction. The commitment rule determines (1) the probability that safety permits commitment under the alternative, (2) the target-side cost of remaining noncommittal, (3) and the information available when the decision is made. Bounded precommitment information therefore leaves a fixed fraction of the oracle gap unavoidable. If the gap is Ω(T), every uniformly safe policy has linear regret. We establish the obstruction in a constrained linear system with quadratic regulation cost. We also prove recovery in special cases and derive semidefinite upper certificates for deterministic linear-Gaussian systems.
Jul 15, 2026stat.ML

Price of Fairness in Bandits: A Tight Minimax Characterization

In bandit problems, standard regret-minimizing algorithms treat exploration as an amortized cost, which can expose early participants to unfair ex-ante losses in settings such as clinical trials. Recent work addresses this by evaluating the sequence of per-round expected rewards through the generalized pp-mean, interpolating between utilitarian welfare (p=1p=1), Nash welfare (p→0p\to0), and Rawlsian fairness (p→−∞p\to-\infty). Although tight guarantees are known for p≥0p\ge0, the strictly fair regime q=−p>0q=-p>0 remains unresolved because negative-power means are dominated by the smallest per-round rewards. For σσ-sub-Gaussian rewards with nonnegative means, the best prior algorithm relied on uniform early exploration and achieved regret O(k(q+1)/2/T)O(k^{(q+1)/2}/\sqrt{T}), while the only general lower bound was the classical Ω(σk/T)Ω(σ\sqrt{k/T}). Thus it was unclear whether the extra dependence on kk was intrinsic to strict fairness or an artifact of uniform exploration. We close this gap by identifying the exact polynomial price of strict fairness. Using a needle-in-haystack construction, we prove an algorithm-independent lower bound Ω(σkmax⁡(1,q)/T)Ω(σ\sqrt{k^{\max(1,q)}/T}); for q>1q>1, this shows that the penalty kq/2k^{q/2} is information-theoretically unavoidable. We then introduce \textsf{UCB-HARE} (Harmonic Anchored Rank Exploration), which replaces uniform exploration with an inverse-weighted harmonic rank schedule protected by a certified positive-mean anchor. Its regret is O~(σkmax⁡(1,q)/T)\widetilde{O}(σ\sqrt{k^{\max(1,q)}/T}), matching the lower bound up to logarithmic factors. Experiments on synthetic instances confirm that \textsf{UCB-HARE} improves over uniform-exploration baselines, with gains increasing as qq grows.
Jul 14, 2026cs.CR

Watermark Forensics for Generative Models: An Information-Theoretic Perspective

A watermark in a generative model's output is usually asked only whether a text is machine-made. The same mark can do more: attribute it to the user who produced it, extract a hidden payload, or localize the part that survives editing. These form a forensic ladder, and we ask what each rung costs in the sample length nn. One object organizes the answers. Let SS be the secret the mark carries (a user's identity or payload), and let the information profile ν(t)=I(S;Xt∣X<t)ν(t)=I(S;X_t\mid X_{<t}) record how much the tt-th token reveals about SS given the earlier ones. Its total mass pays for attribution and extraction; how that mass is spread pays for localization; and detection alone is paid for not by information but by presence, the distance from the marked to the unmarked distribution. The literature's two quality models, a mark subtle on every token and one that stamps a few tokens loudly, are two incomparable ways of capping this profile. Our main theorem settles the ladder's entropy column. For statistically distortion-free schemes, attributing a text to one of NN users costs Θ(log⁡N/h)Θ(\log N/h) tokens over every stationary-ergodic source of entropy rate hh, sharp to a (1+o(1))(1+o(1)) factor: to our knowledge the first tight entropy-rate law for multi-user attribution (via exact alignment). The natural collision-counting analysis overcharges without bound; only a decoder thresholding each candidate by its own realized surprisal attains the rate while almost never implicating an innocent user. A matching converse makes the law two-sided, and extraction of an ℓ\ell-bit payload costs Θ(ℓ/h)Θ(\ell/h). Two gaps are real, not modeling artifacts: a Θ(log⁡N)Θ(\log N)-token window in which a text is provably machine-made yet unattributable, and a footprint-resolution uncertainty principle. Experiments on GPT-2, Pythia-410M, and Qwen2.5 recover the predicted constants.
Jul 13, 2026cs.LG

Fundamental Limitations of Fixed-Budget Best-Arm Identification

In fixed-budget best-arm identification, also known as ranking and selection, an algorithm has a sampling budget to distribute across KK arms. Each sample provides noisy feedback about that arm's mean, and the goal is to identify the arm with the largest mean. A common performance benchmark is the static oracle: a non-adaptive strategy that knows the means in advance and chooses fixed sampling proportions to maximize the exponential decay rate of the probability of incorrect identification. Several adaptive algorithms have been constructed such that their sampling proportions converge to the static oracle proportions. However, it has remained open whether any algorithm could match the static oracle's error decay rate uniformly across all problem instances. We answer this in the negative. For any K≥3K\ge 3 and for rewards drawn from any one-parameter natural exponential family, we show that for any algorithm, there is at least one instance where the error decay rate is at most (1+log⁡(K)8)−1\left(1 + \frac{\log(K)}{8}\right)^{-1} times that of the static oracle. This also answers the open question posed by Qin (2022), showing that fixed-budget best-arm identification does not admit a complexity.